Exposes Buildbot at http://buildbot.thehellings.lan and http://buildbot.home so Klaatu (and other LAN tools without Tailscale) can reach it directly.
Changes
hosts/unstable/jeremiah/default.nix
Adds greg.proxies entries for buildbot.home and buildbot.thehellings.lan, both reverse-proxying to http://localhost:8010/
Nginx opens ports 80/443 automatically via the greg.proxies module
Buildbot's own Gitea OAuth still handles authentication — nothing bypassed
hosts/unstable/genesis/net/hosts
Adds buildbot.thehellings.lan as a DNS alias for 10.42.1.8 (jeremiah LAN IP)
Adds buildbot.home as a DNS alias for 100.102.186.39 (jeremiah Tailscale IP)
Notes
No new secrets required
Port 8010 remains firewalled externally; only the nginx proxy on 80 is exposed on the LAN
After merge + deploy: colmena apply --on jeremiah genesis
## Summary
Exposes Buildbot at `http://buildbot.thehellings.lan` and `http://buildbot.home` so Klaatu (and other LAN tools without Tailscale) can reach it directly.
## Changes
**`hosts/unstable/jeremiah/default.nix`**
- Adds `greg.proxies` entries for `buildbot.home` and `buildbot.thehellings.lan`, both reverse-proxying to `http://localhost:8010/`
- Nginx opens ports 80/443 automatically via the `greg.proxies` module
- Buildbot's own Gitea OAuth still handles authentication — nothing bypassed
**`hosts/unstable/genesis/net/hosts`**
- Adds `buildbot.thehellings.lan` as a DNS alias for `10.42.1.8` (jeremiah LAN IP)
- Adds `buildbot.home` as a DNS alias for `100.102.186.39` (jeremiah Tailscale IP)
## Notes
- No new secrets required
- Port 8010 remains firewalled externally; only the nginx proxy on 80 is exposed on the LAN
- After merge + deploy: `colmena apply --on jeremiah genesis`
Add greg.proxies entries on jeremiah for buildbot.home and
buildbot.thehellings.lan, both proxying to http://localhost:8010/.
Nginx handles auth passthrough - Buildbot's own Gitea OAuth applies.
Add DNS aliases in genesis hosts file:
- buildbot.thehellings.lan → 10.42.1.8 (LAN)
- buildbot.home → 100.102.186.39 (Tailscale)
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
Exposes Buildbot at
http://buildbot.thehellings.lanandhttp://buildbot.homeso Klaatu (and other LAN tools without Tailscale) can reach it directly.Changes
hosts/unstable/jeremiah/default.nixgreg.proxiesentries forbuildbot.homeandbuildbot.thehellings.lan, both reverse-proxying tohttp://localhost:8010/greg.proxiesmodulehosts/unstable/genesis/net/hostsbuildbot.thehellings.lanas a DNS alias for10.42.1.8(jeremiah LAN IP)buildbot.homeas a DNS alias for100.102.186.39(jeremiah Tailscale IP)Notes
colmena apply --on jeremiah genesis